57
57
57
47
57
57
57
42
42
42
57
57
57
57
57
42
57
42
The Odyssey and trojans again: MovieReaper attacks users in multiple countries via compromised torrents
Kaspersky uncovers MovieReaper, a multi-stage malware framework spread via compromised itorrents.org torrent files, hitting hundreds of users.
In mid-August 2026 Kaspersky identified a campaign distributing an unknown loader disguised as movies such as 'the odyssey (2026) [1080p] [webrip] [5.1].exe' (MD5 A0B13781EDD7CFDAB13D79AFFF3C83C1) through torrent trackers. The attackers compromised the itorrents[.]org torrent-file repository rather than the trackers themselves, so multiple platforms delivered malicious torrents; the repository remained compromised at publication. Several hundred victims, including individuals and organizations in Russia, Türkiye, Japan, Kenya, Uganda, Colombia and several European countries, were infected with the modular MovieReaper framework, detected as HEUR:Trojan.Win64.Agent.gen. The loader fetches shellcode from deadhub[.]org (fallback IP 193.23.118[.]155), maps it into RWX memory, and uses PEB traversal, encrypted strings and direct syscalls to evade sandboxes.
64
Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone
NLnet Labs patched a critical heap overflow (CVE-2026-81642) in Unbound's DNSSEC validator that a malicious DNS zone can trigger for possible RCE.
Unbound 1.26.1, released September 17, fixes nine CVEs, including critical heap overflow CVE-2026-81642 (CVSS 9.1) in the DNSSEC validator, which affects every version through 1.26.0 and can be triggered by an attacker controlling a malicious zone that serves a DNSKEY record with a compression pointer into its own data, causing denial of service and possibly remote code execution. CVE-2026-82717, a heap corruption in CNAME synthesis reported by Ben Morris of Anthropic, could also lead to RCE under certain systems and compilation options. NLnet Labs has not reported exploitation and CISA marks CVE-2026-81642 exploitation as none; standalone and combined patches are available alongside the 1.26.1 release.
68
42
57
57
57
42
42
57
60
57
42
42
42
47
57
42
57
57
42
57
57